review SKILL.md skillA
review from dzhng/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add dzhng/skills/review@git:20260708.3797915Pins git:20260708.3797915 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- dzhng/skills
- Path
skills/engineering/review/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260708.3797915, committed Jul 8, 2026
- First version recorded
- Jul 7, 2026
- Size
- 1,892 bytes
- Repository stars
- 1,377
- License
- MIT
Closeout pass on a finished substantive change — sequence refactor-clean (shape), code-review (diff), and write-docs (docs) so all three run, in the order where each feeds the next. Use after implementing a slice or feature and before calling it done or committing; when the user asks for a final review, a cleanup-and-document pass, or to "review everything." For a diff-only audit, reach code-review directly.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Review A finished change earns "done" only after three lenses pass: its **shape**, its **diff**, and its **docs**. Each has a specialist skill. This skill owns only what they can't — the order they run in, the loop between them, and one verdict. ## Workflow 1. **Scope.** Fix the diff under review and confirm it's substantive; skip the whole pass for trivial edits. 2. **Shape — [refactor-clean](../refactor-clean/SKILL.md).** Run it first, while restructuring is cheap and before you audit a diff that's about to move. 3. **Diff — [code-review](../code-review/SKILL.md).** Audit the settled shape. A finding that forces a structural change sends you back to step 2, not onward. 4. **Docs — [write-docs](../write-docs/SKILL.md).** Update the docs this change touched. Then trace the link chain from the root README down to each one: every link on the path still resolves, and the hub-to-leaf flow still reads in order. 5. **Report.** One verdict across all three passes — what each found, what you changed, what you left and why. Done only when every pass is clean or resolved. ## Rules - When you enter a pass, read its skill — the rules live there, not here. …
Read the whole file at its exact version.
How to install
mdr add dzhng/skills/review@sha256:793308592d5603b8The line at the top of this page pins the label git:20260708.3797915, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_z22qqpkglvpti2c6)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Jul 7, 2026 and Jul 8, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260708.3797915 latest | 2026-07-08 | 3797915 | 1,892 B | A | view · diff |
| git:20260707.7202960 | 2026-07-07 | 7202960 | 9,735 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (1892 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
dzhng/skills · 1,377 stars · license MIT · pushed 2026-10-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_z22qqpkglvpti2c6 GET https://markdownregistry.com/api/v1/resolve?ref=dzhng/skills/review GET https://markdownregistry.com/api/v1/blob/793308592d5603b83a1aad9a34f710ce808ea074382f096075080e62c4408552
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.